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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Previously Presented) A method of sending encrypted streamed data 
over an IP network from a first node to a second node, the method comprising: 

using Internet Key Exchange (IKE) Phase 1 negotiation to establish an IKE 
security association (SA) between the first and second nodes; 

entering IKE Phase 2 to negotiate an IPSec SA for each transmission direction; 

passing the IPSec SA data to streamed data applications associated with the 
streamed data; 

encrypting the streamed data at the first node with a cipher using a shared secret 
forming part of said IPSec SA; 

constructing IP datagrams containing the encrypted streamed data, the 
datagrams not including an tPSec header or headers; and 

sending the IP datagrams from the first node to the second node. 

2. (Original) A method according to claim 1, wherein said streamed data 
is VoIP data or videoconferencing data. 

3. (Previously Presented) A method according to claim 1, wherein said 
first and second nodes are end points for the data. 

4. (Previously Presented) A method according to claim 1, wherein said 
first and second nodes tunnel data between respective end points, 

5. (Previously Presented) An apparatus for securing streamed data over 
an IP network from a first node to a second node, the apparatus comprising: 
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processing means and memory containing software instructions for implementing 
IPSec protocols; 

an application for delivering streamed data; 

means for using Internet Key Exchange (IKE) Phase 1 negotiation to establish an 
IKE security association (SA) between the first and second nodes; 

means for entering IKE Phase 2 negotiation to negotiate an IPSec SA for each 
transmission direction; 

means for passing the IPSec SA data to applications associated with the 
streamed data, 

encrypting means for encrypting the streamed data at the first node with a cipher 
using a shared secret forming part of said IPSec SA; 

means for constructing IP datagrams containing the encrypted streamed data, 
the datagrams not including an IPSec header or headers; and 

transmission means for sending the IP datagrams from the first node to the 
second node. 

6. (Original) Apparatus according to claim 5, the apparatus being an end 
user terminal such as a telephone, communicator, PDA or palmtop computer, or a 
personal computer (PC). 

7. (Previously Presented) Apparatus according to claim 6, the apparatus 
being a firewall or gateway coupled to the first node, which is the source of the 
streamed data. 
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